Effective Date: 01/01/2026
Last Reviewed: 31/01/2026

1. Introduction

EyeDoc Eye Clinics Ltd. (“Eye Doctor Clinics”, “we”, “us”, “our”) is committed to protecting the privacy, confidentiality, and security of personal data and to complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Irish data protection law.

This Privacy & Data Protection Policy explains how we collect, use, store, and protect personal data when you:

• Visit our website (www.eyedoc.ie)

• Book or request an appointment

• Are referred to us by a healthcare professional

• Attend Eye Doctor Clinics for ophthalmic assessment, diagnosis, treatment, or follow-up care

• Communicate with us for administrative or clinical purposes

2. Data Controller

EyeDoc Eye Clinics Ltd. is the Data Controller for personal data processed in connection with the provision of ophthalmic and healthcare services.

Contact details:

Eye Doctor Clinics 
EyeDoc Eye Clinics Ltd.
Unit 3, Ground Floor
Blanchardstown
Dublin
D15 YP03
Email: contact@eyedoc.ie
Phone: 085 138 1000

3. Categories of Personal Data We Process

3.1 General Personal Data

• Name

• Address

• Telephone number

• Email address

• Date of birth

• Appointment, referral, and correspondence details

3.2 Healthcare Data (Special Category Data)

Where you receive care from us, we process health data including:

• Medical and ophthalmic history

• Presenting complaints and symptoms

• Clinical examination findings

• Diagnostic investigations and imaging

• Diagnoses, treatment plans, procedures, and outcomes

• Medications, allergies, and relevant risk factors

• Clinical correspondence and follow-up records

3.3 Website, Booking, and Technical Data

• Appointment booking information

• Referrer details (where applicable)

• IP address, browser type, device information

• Website usage and analytics data

• Cookie data (see Section 11)

We do not routinely collect PPS numbers unless legally required.

4. Legal Bases for Processing

4.1 General Personal Data (Article 6 GDPR)

We process general personal data on one or more of the following lawful bases:

• Article 6(1)(b) – performance of a contract (e.g. appointment booking and management)

• Article 6(1)(c) – compliance with legal obligations

• Article 6(1)(e) – provision of healthcare services in the public interest

• Article 6(1)(f) – legitimate interests (e.g. administrative efficiency, service improvement, system security)

4.2 Healthcare Data – Special Category Data (Article 9 GDPR)

We process health data strictly in accordance with:

• Article 9(2)(h) – medical diagnosis, provision of health care or treatment, and management of healthcare systems

• In conjunction with Article 6(1)(c) and Article 6(1)(e)

Consent is not the primary legal basis for processing health data necessary for clinical care, but may be used where required for specific non-clinical purposes.

5. How We Use Personal Data

We use personal data, including healthcare data where applicable, for the following purposes:

• Provision of Ophthalmic Care
  To assess, diagnose, treat, and manage eye conditions, including examinations, investigations, procedures, and clinical decision-making.

• Investigations and Diagnostics
  To request, perform, store, and review diagnostic tests, imaging, and other investigations relevant to ophthalmic care.

• Follow-Up and Ongoing Care
  To monitor treatment outcomes, provide follow-up appointments, and manage ongoing or chronic eye conditions.

• Clinical Record Keeping
  To create, maintain, and update accurate medical records in accordance with professional, legal, and regulatory requirements.

• Appointment Management and Communication
  To schedule appointments, send reminders, and communicate with patients regarding their care or attendance.

• Referrals and Continuity of Care
  To receive, process, and respond to referrals and to communicate with referring clinicians or other healthcare providers involved in a patient’s care.

• Administrative, Legal, and Regulatory Purposes
  To comply with legal obligations, respond to regulatory requests, manage complaints, and protect our legal rights.

• Service Improvement and Quality Assurance
  To review and improve clinical services, patient safety, and operational effectiveness, using anonymised or pseudonymised data where possible.

6. Third-Party Processors

We use trusted third-party service providers (“processors”) to support our operations. These processors act only on our instructions and under appropriate Data Processing Agreements.

Processor categories include:

• Appointment booking systems (e.g. Acuitas, Calendly, Square)

• Electronic health record systems (e.g. Acuitas)

• Scheduling and diary management systems (e.g. Google Calendar)

• IT, hosting, and communications services

All processors are required to implement appropriate technical and organisational safeguards.

7. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).
Where this occurs, we ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions, or

• Standard Contractual Clauses approved by the European Commission

8. Data Retention

We retain personal data only for as long as necessary and in accordance with legal, regulatory, and professional obligations.

• Clinical records are retained in line with Irish medical record retention requirements.

• Administrative and booking data is retained only for as long as required for operational and legal purposes.

• Data is securely deleted or anonymised when no longer required.

9. Your Rights Under GDPR

You have the following rights, subject to applicable law:

• Right of access

• Right to rectification

• Right to erasure (where applicable)

• Right to restriction of processing

• Right to data portability

• Right to object to certain processing

• Right to lodge a complaint with the Data Protection Commission (Ireland)

Requests can be made using the contact details in Section 2.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure clinical and administrative systems

• Role-based access controls

• Staff confidentiality obligations

• Regular review of security practices

11. Cookies and Website Analytics

Our website uses cookies and similar technologies to ensure functionality, analyse usage, and improve user experience.

Non-essential cookies are subject to user preferences and consent.
Further details are provided in our Cookie Policy, which forms part of this Privacy & Data Protection Policy.

12. Changes to This Policy

We may update this policy to reflect changes in our practices, systems, or legal obligations.
The most current version will always be available on our website.

13. Contact Us

If you have any questions about this policy or how your personal data is processed, please contact:

📧 contact@eyedoc.ie
📞 085 138 1000